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WHAT IS CLAIMED IS: 



1. An electronic module used ©or secure transactions 



* * 



comprising : 

input/output circuitry yor communicating to a data 
processing circuit; 

math coprocessor circuitry electrically connected to 
said input/output circui/cry; 

microprocessQ^^-eircuitry electrically connected to 



said input /output ci 
memory circui 



:uikry; and 
electrical 



connected to said 



microprocessor! circuitry, said electronic module being 
programmable to provide secure, encrypted data transfers 
between said electronic module and said data processing 
circuit . 



2. The electronic module of claim 1, wherein said data 
processing /circuit is another electronic module. 



/ 



3. The electronic module of claim 1, further comprising 
a one-wire interface connected to said input/output 



circuitry. 
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4. The electronic module of claim 1, /wherein said 

memory circuitry is adapted to st©re a private 

encrypt ion/decrypt ion key for use duri/ng the encrypted 

data transfers between said electronic module and said 

data processing circuit.. 



1 

2 



5. The electronic module of claim 1, wherein said 
encrypted transactions are time stamped. 



T 1 
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6 . A system for communicat. 



cure transactions, 



f * 



comprising : 





a first module comp: 

input /output circ^uife^ry ; 

random number creating me^ns for creating a 
random number; and 

a first transaction group for requesting said 
random number creatine/ means to create said random number 
and for providing sai/d random number to said input \output 
^circuitry; and 

a service prdvider equipment comprising: 

means for reading said random number from said 
input/output circuitry of said first module; 
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means for combining said random number with a 
first data and for encrypting the combination of said 
random number and said first data with a /private key to 
produce a first certificate, whereby said input/output 
circuity of said first module is adapted to receive said 
first certificate. 
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7. The system of claim 6, wherein /said service provider 



equipment comprises a second 



8 . The system of claim 



erAin \saio first module 



further comprises an idenkixaTer for \identifying said 
first module, and wherein said first transaction group 
provides said identifier to/ said input/output circuitry. 
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9. The system of cla/im 8, wherein said means for 
reading is further for reading said identifier from said 
input/output circuitry of said first module. 



/ 



10 . The system of claim 6 , wherein said first module 



further comprises' a second transaction group. 
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11. The system of claim 6, wherein said module further 

comprises a means for time stamping a complete 

transaction. 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 



12. A method of communicating encrypted information 
between a module and a seryice provider equipment, 
comprising the steps of: 

a) creating a firsj^ranaor\ number in said module; 



b) passing said ra: 



umber to said service 



provider equipment; 

c) encrypting a 



ast sail 



.ndom number with a 



/ 



private key in said service provider equipment thereby 
producing a certificate; 

d) passing at least said certificate to said module; 

e) decrypting ysaid certificate with a public key in 
said module; 

f) comparing said first random number with a number 
found in the decrypted first certificate of step e) to 
determine if /the two numbers match. 
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13. The method of claim 12, wherein/ step b) further 
comprises the step of passing a modular identifier to said 
service provider equipment . 



14. The method of claim 12/ wherein said service 
provider equipment is another ymodule . 



16. The method of cl 



is substantially a o 




15. The method of clain/ 12, wherein said method 
incorporates a single wi 



rein said single wire bus 



17. A method of /communicating encrypted information 
between a module and a service provider equipment, 
comprising the pteps of : 

a) creating a first random number in said service 
provider equipment; 

b) passing said random number to said module; 

c) encrypting at least said random number with a 
private Aey in said module thereby producing a first 



certificate ; 
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10 d) passing at least said first certificate to said 

11 service provider equipment; / 

12 e) decrypting said first certificate with a public 

13 key in said service provider equipment; 

14 f) comparing said first random number with a number 

15 found in the decrypted first/ certificate of step f ) to 

16 determine if the two numbers match. 




18. The method 



claim 17, wherein said service 



3 

i: = i 



provider equipme: 



is 



rauher module . 



19. The method \ ok claim 17, wherein said method 
incorporates a single wire bus. 



20. The method/of claim 17, wherein said single wire bus 
is substantially a one-wire bus. 
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21. A metnod of decrypting encrypted data using a 
module, comprising the steps of: 

receiving a first encrypted data and a second 
encrypued data; 
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decrypting said first encrypted data with a private 

key stored in said module, whereby a first decryption key 



is created; 



providing said firs; 



iryption key to an electronic 



system; 



decrypting saidl^econd encrypted data with said 
first decryption key via said electronic system, whereby 
a useful information is created. 



r? 
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22. The method of claim 21, wherein said encrypted data 
is an electronic mail message. 
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